Add systemd support and pre-installed Cisco 5.1.14.145 binaries

- Add systemd, dbus packages to Dockerfile
- Pre-install Cisco Secure Client 5.1.14.145 binaries
- Add hosts entries for VPN servers at runtime
- Add cgroup volume mount for systemd support
- Start dbus daemon in entrypoint for Cisco client

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/rego-tunnel-linux/source/Dockerfile

@@ -1,7 +1,10 @@
 FROM ubuntu:24.04
-ENV DEBIAN_FRONTEND=noninteractive 
+ENV DEBIAN_FRONTEND=noninteractive
+ENV container=docker
 
+# Install systemd and required packages
 RUN apt-get update && apt-get install -y \
+    systemd systemd-sysv dbus dbus-x11 \
     iproute2 iptables ca-certificates \
     curl wget openssh-client \
     x11vnc xvfb fluxbox novnc websockify xterm nano oathtool \
@@ -17,18 +20,50 @@ RUN apt-get update && apt-get install -y \
 
 RUN apt-get update && (apt-get install -y libasound2t64 || apt-get install -y libasound2) && rm -rf /var/lib/apt/lists/*
 
-COPY cisco-secure-client-linux64-5.1.11.388-core-vpn-webdeploy-k9.sh /tmp/cisco-install.sh
-RUN chmod +x /tmp/cisco-install.sh && \
-    /tmp/cisco-install.sh && \
-    rm /tmp/cisco-install.sh
+# Configure systemd - remove unnecessary units
+RUN cd /lib/systemd/system/sysinit.target.wants/ && \
+    ls | grep -v systemd-tmpfiles-setup | xargs rm -f && \
+    rm -f /lib/systemd/system/multi-user.target.wants/* && \
+    rm -f /etc/systemd/system/*.wants/* && \
+    rm -f /lib/systemd/system/local-fs.target.wants/* && \
+    rm -f /lib/systemd/system/sockets.target.wants/*udev* && \
+    rm -f /lib/systemd/system/sockets.target.wants/*initctl* && \
+    rm -f /lib/systemd/system/basic.target.wants/* && \
+    rm -f /lib/systemd/system/anaconda.target.wants/* && \
+    rm -f /lib/systemd/system/plymouth* && \
+    rm -f /lib/systemd/system/systemd-update-utmp*
 
-COPY hostscan /root/.cisco/hostscan
-RUN chmod -R 755 /root/.cisco/hostscan
+# Copy and extract pre-built Cisco Secure Client 5.1.14.145
+COPY cisco-secureclient-5.1.14.145.tar.gz /tmp/
+RUN tar -xzf /tmp/cisco-secureclient-5.1.14.145.tar.gz -C / && \
+    rm /tmp/cisco-secureclient-5.1.14.145.tar.gz
+
+# Copy user data (hostscan, etc)
+COPY cisco-userdata.tar.gz /tmp/
+RUN tar -xzf /tmp/cisco-userdata.tar.gz -C /root && \
+    rm /tmp/cisco-userdata.tar.gz
+
+# Create Cisco systemd service
+RUN mkdir -p /etc/systemd/system && \
+    echo '[Unit]' > /etc/systemd/system/vpnagentd.service && \
+    echo 'Description=Cisco AnyConnect Secure Mobility Client Agent' >> /etc/systemd/system/vpnagentd.service && \
+    echo 'After=network.target' >> /etc/systemd/system/vpnagentd.service && \
+    echo '' >> /etc/systemd/system/vpnagentd.service && \
+    echo '[Service]' >> /etc/systemd/system/vpnagentd.service && \
+    echo 'Type=forking' >> /etc/systemd/system/vpnagentd.service && \
+    echo 'ExecStart=/opt/cisco/secureclient/bin/vpnagentd' >> /etc/systemd/system/vpnagentd.service && \
+    echo 'Restart=on-failure' >> /etc/systemd/system/vpnagentd.service && \
+    echo '' >> /etc/systemd/system/vpnagentd.service && \
+    echo '[Install]' >> /etc/systemd/system/vpnagentd.service && \
+    echo 'WantedBy=multi-user.target' >> /etc/systemd/system/vpnagentd.service && \
+    systemctl enable vpnagentd.service 2>/dev/null || true
 
 COPY vpn-sso.sh /root/vpn-sso.sh
 RUN chmod +x /root/vpn-sso.sh
 
 COPY entrypoint.sh /entrypoint.sh
 RUN chmod +x /entrypoint.sh
+
+VOLUME [ "/sys/fs/cgroup" ]
 EXPOSE 8806
 ENTRYPOINT ["/entrypoint.sh"]